A security team wants to automate the response to a ransomware attack by isolating infected endpoints from the network. They have a SOAR platform and an endpoint detection and response (EDR) tool. Which integration should they implement?

Use a network scanner to identify and block the endpoint.

Use the firewall API to block the endpoint's IP address.

Use the EDR API to trigger a network isolation action on the endpoint when a threat is detected.

Use a VPN to disconnect the endpoint.

A security team wants to integrate their network access control (NAC) system with their identity provider (IdP) to automatically grant or revoke network access based on user attributes. They also want to ensure that the integration is secure and does not expose credentials. Which approach should they use?

Use a shared API key embedded in the NAC configuration.

Use a VPN to connect the NAC and IdP.

Use a REST API with OAuth 2.0 for authentication and authorization.

Use a webhook that sends user attributes in plaintext.

A security operations center (SOC) wants to automatically update firewall rules when a new threat intelligence feed indicates a malicious IP address. The SOC uses a SOAR platform. Which integration method should they use?

Use the firewall's API to push new rules from the SOAR platform.

Send an email to the firewall administrator with the new IP addresses.

Use a network scanner to detect the malicious IPs and block them.

Have the SOC manually update the firewall rules via the web interface.

What is the primary purpose of a Virtual Private Network (VPN)?

To increase the speed of internet connections

To replace the need for firewalls

To securely transmit data over a public network by creating an encrypted tunnel

To block all inbound traffic from the internet

A healthcare organization is migrating its electronic health record (EHR) system to a private cloud. The system has multiple components: a web portal, an API gateway, and a database. The security team wants to ensure that if the web portal is compromised, the attacker cannot directly access the database. They also want to maintain the ability to scale components independently. Which solution should they implement?

Use separate subnets for each component and implement microsegmentation policies that allow only the API gateway to communicate with the database.

Place all components in the same subnet and rely on security group rules to restrict traffic.

Use a single subnet and implement an application-level firewall on the database server.

Deploy a VPN between the web portal and the database to encrypt all traffic.

CompTIASecurityX (CASP+)

Domain 2Objective 4

Network Architecture CAS-005 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

27%of the exam

Questions 6–10

6expert · hard
A security team wants to automate the response to a ransomware attack by isolating infected endpoints from the network. They have a SOAR platform and an endpoint detection and response (EDR) tool. Which integration should they implement?
Select an answer first
7expert · hard
A security team wants to integrate their network access control (NAC) system with their identity provider (IdP) to automatically grant or revoke network access based on user attributes. They also want to ensure that the integration is secure and does not expose credentials. Which approach should they use?
Select an answer first
8application · medium
A security operations center (SOC) wants to automatically update firewall rules when a new threat intelligence feed indicates a malicious IP address. The SOC uses a SOAR platform. Which integration method should they use?
Select an answer first
9foundation · easy
What is the primary purpose of a Virtual Private Network (VPN)?
Select an answer first
10application · medium
A healthcare organization is migrating its electronic health record (EHR) system to a private cloud. The system has multiple components: a web portal, an API gateway, and a database. The security team wants to ensure that if the web portal is compromised, the attacker cannot directly access the database. They also want to maintain the ability to scale components independently. Which solution should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Network Architecture CAS-005 Practice Questions (Page 2)

Questions 6–10

A security team wants to automate the response to a ransomware attack by isolating infected endpoints from the network. They have a SOAR platform and an endpoint detection and response (EDR) tool. Which integration should they implement?

A security operations center (SOC) wants to automatically update firewall rules when a new threat intelligence feed indicates a malicious IP address. The SOC uses a SOAR platform. Which integration method should they use?

What is the primary purpose of a Virtual Private Network (VPN)?

Keep studying — Security architecture